4262014.gosecureinstall.com
Fundacion Private Whois (Proxy Registrant)
Domain Information
The domain 4262014.gosecureinstall.com is registered by proxy through INTERNET.BS CORP. and was originally registered in March of 2014. This domain has been known to host and distribute adware as well as other potentially unwanted software. The hosted servers are located in Ashburn, Virginia within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Web Services (AWS) cloud computing platform.
Registrant:
Fundacion Private Whois
Registrar:
INTERNET.BS CORP.
Server location:
Virginia, United States (US)
Create date:
Friday, March 21, 2014
Expires date:
Saturday, March 21, 2015
Updated date:
Friday, March 21, 2014
ASN:
AS14618 AMAZON-AES - Amazon.com, Inc.,US
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Installer.SETUPDOTEXE.F, PUP.Adknowledge.SETUPDOT.Bundler (M)
100.00%
Malwarebytes
PUP.Optional.OptimumInstaller.A
50.00%
NANO AntiVirus
Trojan.Win32.IBryte.cwbnyw
50.00%
Kaspersky
not-a-virus:Downloader.Win32.Agent
50.00%
Comodo Security
Application.Win32.IBryte.U
50.00%
Dr.Web
Trojan.Packed.28561
50.00%
VIPRE Antivirus
Optimum Installer
50.00%
Avira AntiVirus
Adware/iBryte.bxjq
50.00%
Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
50.00%
ESET NOD32
Win32/AdWare.iBryte.Z application
50.00%
Rising Antivirus
PE:Malware.Agent!6.175E
50.00%
Panda Antivirus
Trj/Genetic.gen
50.00%
K7 AntiVirus
Unwanted-Program
50.00%
Sophos
PUA.iBryte Optimum Installer
50.00%
The domain 4262014.gosecureinstall.com has been seen to resolve to the following 2 IP addresses.
ec2-54-243-244-249.compute-1.amazonaws.com
September 5, 2014
ec2-23-21-189-120.compute-1.amazonaws.com
September 5, 2014
File downloads found at URLs served by 4262014.gosecureinstall.com.
URL:
http://4262014.gosecureinstall.com/
Network:
Amazon Web Services (AWS), running an EC2 instance
Web server:
Microsoft-IIS/7.5 (ASP.NET) (Version: 2.0.50727)
